Privacy Policy

We don't own your data. We never did. We collect the minimum the platform needs. We can't sell, license, or advertise against it on our own — only you can direct those — and no AI model learns from it unless you direct that. Nothing happens to your data without your say — the exceptions are the ones the law forces on everyone, and when they happen, we tell you.

Data about you as a user — your account, settings, usage, and support requests, whether you hold a personal account under the Terms of Service or use the platform as part of an organization. We collect it and are responsible for it (the "controller"). This policy governs it.

Data an organization puts into the platform — records, files, reports, and (for nonprofits especially) information about the people it serves. Whoever put it in has the say: who sees it, what leaves, when it's deleted. That's true for every node — nonprofit, grantmaker, consultant. We process it only as directed (the organization's "processor"), under the processing commitments in the Master Subscription Agreement that bind us the way a data processing agreement would. (A personal-account holder has the same say over their own content under the Terms of Service.)

What you give us (name, email, organization, payment details), what using the product produces (logins, feature use, device data, error logs), and what you send us (support requests). Operating the platform also writes to the claim ledger — the append-only record of which claims you entered, when, and under which consent grants (§9); it is the platform's provenance backbone, kept so trust can be checked rather than taken on faith.

We use all of this to run your account, operate and secure the platform, bill the right party, support you, and meet legal obligations. Marketing email is opt-out anytime. Cookies: on the platform, only what keeps you signed in. On our website, live chat and analytics cookies load only if you accept them, and you choose each separately; we use no advertising trackers. What the website collects, and who receives it, is in §13.

Where GDPR applies, our legal bases are: contract, for running your account and the platform; legitimate interest, for security, support, and product communication; and consent, wherever the law requires it.

No AI model learns from your data unless you direct it. Not ours, not our vendors', and "improving the platform" is never a back door.

Three directions you can give. AI working for you: use an AI feature on your data — it acts at your direction and teaches no model anything. A model for you alone: ask us in writing to train on your records — the result works only for you. A model that benefits everyone: opt in to a named program pooling consented data (§7 rules apply). None of these is an exception — they're the rule working.

One honest note about scale: most of the platform's features are AI features, so AI will touch your data routinely as you work. The line that matters isn't whether AI touches your data — it's whether anything learns from it. Acting on your data is the service. You learn from it first. Who learns next is your call.

No decision about you is made solely by an algorithm, and features tell you when AI helped.

The vendors it takes to run the platform — hosting, payments, email, error monitoring, website tools, the AI model providers behind specific features. Each is bound by contract to this policy's commitments, gets only what its job requires, is disclosed on request, and is announced before being added. If a court or government demands data, we tell you unless the law forbids it, and we produce the narrowest thing the order requires.

We don't own your data — so the rights to sell, license, or otherwise exploit it aren't ours to exercise. They're yours. That means we can't sell it, can't license it, and can't use it for advertising on our own. The most we can ever do is build features that let you do these things. And your data never becomes an asset if the company is sold: an acquirer inherits every commitment in this policy, and you get notice and time to take your data out first.

Nothing you put in appears in anything we publish, share, sell, or train without your consent — no benchmark, no dataset, no model. "Anonymous" isn't an exception: small numbers can give you away.

Three things exist without a consent grant, all thin: operational counts from running the platform; a payer's receipt — seat activation, whether what it paid for was turned on, and nothing more; and analysis by people you've consented to — a funder comparing its own portfolio, visible to you.

Opting in is how anything more happens — one named program at a time, purpose stated up front. Identifiers come out before anything is computed. Nothing traceable to you or the people in your data. No recipient may re-identify anyone. Research built on consent grants is free to the communities that consented. Leave any program, going forward, any time.

See what we hold about you, correct it, delete it, take a copy in a portable format, or narrow how we use it: privacy@resilia.com or in-product settings, free, answered within 30 days. Organizations and personal-account holders exercise these rights over platform data directly — export and deletion are product features. If a person whose information lives in an organization's data contacts us, we route the request to that organization and help them honor it. EU/UK users can also complain to their data protection authority.

If you are a California resident, you have rights under the CCPA/CPRA to know, delete, correct, and limit; we do not sell or "share" personal information as those laws define it, and we do not discriminate against you for exercising your rights.

Account data lives while your account does. Billing records: as tax law requires.

When you delete your data or leave, your content — every record, file, and field value — is made permanently unrecoverable, and backups roll off on a fixed schedule. The platform's ledger is append-only, so one thing remains: entries showing a claim existed, when, and under which consent grants. The content itself is gone for good.

One caveat the Trust page also makes: deletion reaches our systems, not memos a funder already wrote from views you'd consented to share.

Encrypted in transit and at rest. No funder or consultant can see past a consent grant, ever; when our staff access an account to operate or support it, that access is logged in your audit trail. We're a US company; where EU/UK law applies, transfers rest on Standard Contractual Clauses. If a breach affects your data, we notify you within 72 hours of confirming it.

Resilia accounts are for adults doing professional work; we don't knowingly collect children's data. But platform data is often about the people nonprofits serve — including children and people in vulnerable situations. It gets the strongest handling: it moves only at your direction, identifiers never reach a derivative artifact, it enters no program without your opt-in, and our duty to protect it runs to the people it describes.

We may update this policy by posting a new version and notifying you; the commitments that protect your data can't be weakened without your affirmative consent, as the Terms of Service §15 and Master Subscription Agreement §17 describe. Questions, or to exercise a right: privacy@resilia.com.

Forms. When you book a conversation, ask for more information or send a message, we receive what you type (name, email, organization, role, how you heard about us, your message) plus three facts about your visit: the first page you visited, the website that sent you, and any campaign tags in the link you followed (UTM tags). If you accepted analytics cookies, we also receive the advertising click ID from that link. If you leave a name blank, we record it as "(not provided)"; we never guess it from your email address. These details go to our customer relationship management (CRM) system so we can reply, schedule and follow up.

Scheduling. After you send the booking form, a calendar from our scheduling tool loads so you can choose a time. The scheduling tool receives your email address to fill in the booking and sets its own cookies. It doesn't load before you send the form.

Live chat. If you accept chat cookies, our live chat tool loads. Its first replies may come from an automated assistant, which says so; type "human" at any time to reach our team. We keep chat transcripts to answer you and follow up.

Analytics. If you accept analytics cookies, our website analytics tools record how the site is used. They run with cross-device tracking and ad personalization turned off.

Your choices. Chat and analytics are separate choices in the cookie banner. Change them any time with "Cookie settings" at the foot of every page; withdrawing removes those tools' cookies from our site. We ask again after 12 months or when we add a tool.

Email. If you contact us, we may send occasional updates about Resilia. Every email has an unsubscribe link, and you can opt out any time.

Why, and for how long. We use enquiry details to respond to you and to follow up (our legitimate interest), and chat and analytics only with your consent. We keep enquiry records until you ask us to delete them: privacy@resilia.com. Your rights in §8 apply.

Who receives website data: our service providers for customer records, live chat, website analytics and scheduling, each only for the purpose above. Ask privacy@resilia.com for the current list of providers.